Linux · Security advisory · May 19, 2026

ALSA-2026:19010: Security update for 15 packages

ALSA-2026:19010, released May 19, 2026, fixes 4 CVEs across 15 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
4
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0137
72nd percentile

Priority of the 4 CVEs

Patch now 0 Urgent 0 High 4 Routine 0

Fixed package versions

ProductReleaseFixed in
postgresqlalmalinux 1016.13-1.el10_2
postgresql-contribalmalinux 1016.13-1.el10_2
postgresql-docsalmalinux 1016.13-1.el10_2
postgresql-plperlalmalinux 1016.13-1.el10_2
postgresql-plpython3almalinux 1016.13-1.el10_2
postgresql-pltclalmalinux 1016.13-1.el10_2
postgresql-private-develalmalinux 1016.13-1.el10_2
postgresql-private-libsalmalinux 1016.13-1.el10_2
postgresql-serveralmalinux 1016.13-1.el10_2
postgresql-server-develalmalinux 1016.13-1.el10_2
postgresql-staticalmalinux 1016.13-1.el10_2
postgresql-testalmalinux 1016.13-1.el10_2
postgresql-test-rpm-macrosalmalinux 1016.13-1.el10_2
postgresql-upgradealmalinux 1016.13-1.el10_2
postgresql-upgrade-develalmalinux 1016.13-1.el10_2

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2026-2005 pg_repack: PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: Post... 8.8 0.0137 None reported
High CVE-2026-2004 pg_repack: PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: Post... 8.8 0.0134 None reported
High CVE-2026-2006 postgresql-private-devel: PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: Post... 8.8 0.0116 None reported
High CVE-2026-2003 libecpg6: Improper validation of type "oidvector" in PostgreSQL allows a database user to disclose a few bytes of server memory 8.8 0.0032 None reported
Showing 1 to 4 of 4 1